Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
File: TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json)
Hash identifier: IP9FxNtroUi9wa/yjzYMzNmLBgtdgSExRQktGAYwgMo=
Subject key identifier: 30:6F:DE:25:F2:22:89:25:CC:B0:D1:FE:35:BE:82:22:14:EA:1D:C7
Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
Certificate issuer: /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Certificate serial: 019CAB3441032C3BF2B4378592DF2ACFFC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 21:00:54 +0000
Manifest this update: Sun 01 Mar 2026 21:00:54 +0000
Manifest next update: Mon 02 Mar 2026 21:00:54 +0000
Files and hashes: 1: GXhFfzPpIHoP7RLYcFMqTWluEZ0.roa (hash: Yx/Lhj5zxPnVZAFBihFZiUuZcLJQ578c7k6Oe82WcJ0=)
2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: a3VuiMBewy+EfChVUP9/PNgt36fE8I77rrjClhFTZ6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:41:03:2c:3b:f2:b4:37:85:92:df:2a:cf:fc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Validity
Not Before: Mar 1 21:00:54 2026 GMT
Not After : Mar 2 21:00:54 2026 GMT
Subject: CN=306fde25f2228925ccb0d1fe35be822214ea1dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:a8:8b:1e:b2:0b:75:56:54:9b:13:6d:98:
0e:e3:96:73:e4:8e:cd:e5:16:01:4f:0c:21:e8:c5:
3b:01:93:ca:c4:62:5f:17:a3:ac:b2:4f:ec:e5:78:
bc:76:85:3e:68:5b:6a:f9:f6:c2:66:2a:1d:f1:62:
a5:60:d5:d8:1c:be:7c:31:ca:26:7a:52:29:10:c1:
84:88:72:67:22:ae:f8:a5:c2:23:f3:c0:c5:be:fb:
01:aa:bb:c6:e7:3c:65:19:01:f6:86:16:0c:27:8d:
b9:a9:79:17:16:67:73:3f:e5:1d:49:bf:a1:77:e2:
4f:fc:45:d6:9c:19:0c:7e:4b:2d:d5:71:7e:cf:09:
27:27:a1:32:87:7d:9f:e8:68:1d:7b:b5:ad:28:60:
7b:1b:f7:13:00:e6:d2:3e:02:4b:92:47:d9:8e:28:
41:46:10:91:a7:15:08:c0:07:3c:cb:ca:6f:cd:6f:
29:b8:16:e5:64:ae:03:18:89:af:c2:16:ba:a4:ab:
a4:3f:9a:aa:a1:0e:ec:96:7e:d7:95:72:41:fb:0b:
f3:73:5d:f4:96:c8:49:ef:af:4a:bd:81:ed:a4:b7:
3b:9a:6f:d2:3e:b7:81:f0:08:ec:9c:07:10:38:09:
7d:5e:ef:19:16:f3:7b:a8:17:33:e8:9a:41:f5:0f:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6F:DE:25:F2:22:89:25:CC:B0:D1:FE:35:BE:82:22:14:EA:1D:C7
X509v3 Authority Key Identifier:
keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:44:48:11:3b:f4:22:5b:0a:bc:a3:2a:9c:d6:7b:6a:81:98:
d1:fd:b3:f4:d2:cf:18:52:fb:ee:e9:84:18:ee:aa:83:6f:e0:
90:b8:ba:2a:e3:bb:61:98:a1:f4:d5:94:37:6d:26:7e:d3:2a:
68:c8:48:42:16:af:ce:fe:9c:d0:9b:82:e4:34:bb:3a:73:1d:
3a:3d:01:95:a9:7b:8b:e0:5d:bf:4a:ab:3c:18:94:e4:aa:b2:
ea:3b:12:26:ce:4f:33:9a:25:3e:77:31:d1:fd:0b:25:9f:a7:
c2:df:f3:ee:5e:04:67:db:5c:25:7e:4a:9d:3e:ae:9c:46:22:
22:88:d2:8c:83:72:1e:7d:df:7d:b6:e9:f1:48:b4:08:40:2c:
c0:8b:d2:7a:5a:74:f6:15:9f:ca:c9:13:47:a4:98:39:09:a3:
89:e6:65:ed:b4:2d:0e:21:ce:b2:ef:7c:b1:1e:6a:2b:7d:47:
b7:8e:50:d1:72:ed:ac:f1:35:bd:f7:30:28:50:7a:ac:28:90:
41:9f:e7:1e:36:b9:a4:ad:0e:0e:c4:66:a6:6e:25:71:8a:48:
2a:3c:df:6e:b4:c9:22:bd:3e:64:c2:cf:ac:8b:e6:e6:b0:36:
d1:bc:18:ae:55:c9:dc:5e:c0:2f:e5:b5:cb:17:17:01:9b:fc:
71:15:46:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNEEDLDvytDeFkt8qz/w2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYWJmMzNiMGIzODA4ODhmZTFlM2I4MGVkYTQ4YjE3ODFi
Yjc3MDkwHhcNMjYwMzAxMjEwMDU0WhcNMjYwMzAyMjEwMDU0WjAzMTEwLwYDVQQD
EygzMDZmZGUyNWYyMjI4OTI1Y2NiMGQxZmUzNWJlODIyMjE0ZWExZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+2oix6yC3VWVJsTbZgO45Zz5I7N
5RYBTwwh6MU7AZPKxGJfF6Ossk/s5Xi8doU+aFtq+fbCZiod8WKlYNXYHL58Mcom
elIpEMGEiHJnIq74pcIj88DFvvsBqrvG5zxlGQH2hhYMJ425qXkXFmdzP+UdSb+h
d+JP/EXWnBkMfkst1XF+zwknJ6Eyh32f6Ggde7WtKGB7G/cTAObSPgJLkkfZjihB
RhCRpxUIwAc8y8pvzW8puBblZK4DGImvwha6pKukP5qqoQ7sln7XlXJB+wvzc130
lshJ769KvYHtpLc7mm/SPreB8AjsnAcQOAl9Xu8ZFvN7qBcz6JpB9Q8D6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBv3iXyIoklzLDR/jW+giIU6h3HMB8GA1UdIwQY
MBaAFEyr8zsLOAiI/h47gO2kixeBu3cJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xODVhNDItY2I3Zi00MDU4LTg2ZjUt
NDFhZTVmNGE1MDU1LzEvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xODVhNDItY2I3Zi00MDU4LTg2ZjUtNDFhZTVmNGE1MDU1
LzEvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0RIETv0
IlsKvKMqnNZ7aoGY0f2z9NLPGFL77umEGO6qg2/gkLi6KuO7YZih9NWUN20mftMq
aMhIQhavzv6c0JuC5DS7OnMdOj0Blal7i+Bdv0qrPBiU5Kqy6jsSJs5PM5olPncx
0f0LJZ+nwt/z7l4EZ9tcJX5KnT6unEYiIojSjINyHn3ffbbp8Ui0CEAswIvSelp0
9hWfyskTR6SYOQmjieZl7bQtDiHOsu98sR5qK31Ht45Q0XLtrPE1vfcwKFB6rCiQ
QZ/nHja5pK0ODsRmpm4lcYpIKjzfbrTJIr0+ZMLPrIvm5rA20bwYrlXJ3F7AL+W1
yxcXAZv8cRVGTg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:11 2026 by rpki-client